Privacy Policy

Effective Date: August 6, 2026 Service: Fastpitch Authority Operator: Fastpitch Authority, 126 Shipman Ln, Double Springs, Alabama 35553 Contact: support@fastpitchauthority.com This Privacy Policy explains what Fastpitch Authority collects, why, who it is shared with, and what you can do about it. Fastpitch Authority publishes athlete profiles, verified performance metrics, and rankings for youth fastpitch softball. Because the subjects of that data are frequently children, several of the protections described here are enforced in our database rather than by a setting in the interface. Where that is true, we say so, and we say what the rule is. Fastpitch Authority and Flex Scorebook share one login and one database. Statistics recorded in Flex Scorebook flow into Fastpitch Authority profiles and rankings. The Flex Scorebook Privacy Policy covers the scorekeeping side; this policy covers profiles, metrics, rankings, and events. ## 1. Who may hold an account Accounts are held by adults — parents, legal guardians, and coaches. A child under 13 may not create or control an account. A parent or legal guardian acts on her behalf for every consent decision, including whether her profile is public at all. An athlete aged 13 or over may hold her own account. Athletes under 18 remain subject to the guardian controls described below. ## 2. What we collect **From the adult holding the account.** Name, email address, a hashed password, account preferences, marketing email preference, support correspondence, and a record of each legal document agreed to with its version and timestamp. **About the athlete.** First and last name, date of birth, graduation year, positions, jersey number, height and weight if supplied, school and travel team, city and state, and a photograph if one is uploaded. Date of birth is used to determine age band and to enforce the under-13 protections in section 5. It is not published. **Performance data.** Plate appearances, pitching lines, and season statistics, derived from games recorded in Flex Scorebook. Rankings computed from those records. **Verified metrics, from Prospect Days.** Measurements taken by our staff — for example exit velocity, home-to-first time, throwing velocity — recorded together with the device used, its serial number, its calibration date, the operator, the method, and the timestamp. That chain of custody is the point of the measurement and is published alongside it. **Event registration data.** Which event, which athlete, payment status, waiver and consent records, and an emergency contact and any medical information you supply for the safety of the athlete at the event. **Payment data.** Handled by our payment processor. We receive a customer identifier, subscription status, plan, renewal date, and the last four digits and brand of the card. We never receive or store a full card number. **Video.** Where video is recorded or uploaded, it is stored with our video provider. Playback requires a recorded consent; see section 6. **Technical data.** IP address, browser and device type, pages visited, and referring site. See section 8. ## 3. Why we collect it - To operate accounts, profiles, and subscriptions - To compute and publish rankings - To run Prospect Days safely, including responding to a medical incident - To take and publish verified measurements with their chain of custody - To send transactional email — receipts, event confirmations, password resets - To send marketing email, only where you have opted in - To detect and prevent abuse, and to keep the platform secure - To meet our legal obligations We do not sell personal information. We do not permit advertising networks to profile visitors on our site. ## 4. What is public, and what is not Fastpitch Authority is in part a public directory. It matters that you know exactly which parts. **Public:** an athlete's name, team, age band, position, graduation year, statistics, ranking, and verified metrics — once her profile has been claimed by a guardian and made public. **Never public:** date of birth, home address, guardian contact details, emergency contact, medical information, payment details, and the venue and start time of any scheduled game. **Unclaimed athletes are never named publicly.** A coach can add a player to a roster before any parent is involved. Until a guardian claims her, that player appears on public pages by jersey number and position only — including in box scores. Her name is not shown. **Game venue and start time are never published.** A team's schedule shows the date and the opponent. One parent cannot consent, on behalf of every other family, to publishing where their daughters will be at a known time. ## 5. Athletes under 13 These rules are enforced in the database. They are not interface settings, and they cannot be switched off by a coach, by staff, or by us in the ordinary course. - An athlete under 13 is not visible to college coach accounts, unconditionally. - Public listing of an athlete under 13 requires both an active paid subscription on the account and a recorded parental consent under the Children's Online Privacy Protection Act. Absent either, she is not listed. - A coach cannot change an athlete's visibility, photograph, biography, or academic information. Those belong to the guardian. - A coach who claims a player in error can undo it, which revokes the consent that claim created. The Children's Privacy Notice sets out COPPA rights in full, including how to review or delete a child's information and how to refuse further collection. ## 6. Photographs and video A photograph is only published where a guardian has permitted it. Video is treated more strictly. Playback requires a recorded consent. **The absence of consent blocks playback** — video does not play by default and become blocked on request; it does not play until permission exists. Withdrawing permission blocks it again immediately, and that block is applied in the database. The Media Release governs publicity use of photographs and video. It is optional and severable: you may decline it entirely and your daughter may still attend a Prospect Day, be measured, and appear in the rankings. ## 7. Who we share information with We use a small number of service providers, each receiving only what it needs to do its job: hosting and database, payment processing, transactional email, marketing email, video storage and delivery, security and content delivery, and website analytics. They act on our instructions and may not use your information for their own purposes. Two limits are worth stating plainly: **Our marketing email provider never receives a child's information.** It holds the adult account holder's name and email address, and coarse facts about the account. Never a child's name, her ranking, her statistics, or her photograph. A marketing email may tell you new stats are available; the stats themselves are only ever sent from our own systems. **We never receive your full card number.** Payments are handled by a certified payment processor. We also disclose information where legally required, where necessary to protect the safety of a child or another person, or in connection with a sale of the business — in which case this policy continues to apply until you are notified of any change. **College coaches.** Our database contains a directory of college programs and a coach-facing interface is planned. It is not built and no college coach account exists today. When it launches, the under-13 rule in section 5 applies without exception, and guardian contact details will be reachable only for athletes in grade 11 and above. ## 8. Analytics and cookies We use a website analytics service to understand how the site is used. It is configured with IP anonymization on, cross-device tracking off, and ad personalization off. We do not run advertising pixels. Analytics is deliberately not loaded at all on pages where the address itself is sensitive: the live scoring screens, shared-profile links, athlete cards, sign-in and password pages, and billing pages. A shared-profile link contains a private token, and we do not send those to a third party. We use cookies that are necessary for the service — keeping you signed in, and remembering preferences such as whether you have dismissed a message. Analytics sets its own cookies. You can block cookies in your browser; the service will still work, but you will be signed out frequently. ## 9. How long we keep information - **Account and profile data** — for as long as the account is open. - **Game records and statistics** — retained as part of the historical record, because a season's results are the basis of a ranking. - **Unclaimed roster entries** — an entry created by a coach and never claimed is deleted or de-identified after 12 months without activity. - **Event and consent records** — retained for as long as needed to evidence the consent given, and to meet our legal and insurance obligations. - **Payment records** — retained as required by tax and accounting law. - **Analytics data** — 14 months. ## 10. Your rights, and how to use them You may: - **See** what we hold about you or your child - **Correct** anything inaccurate - **Delete** your child's information, or your account - **Withdraw** a consent you previously gave - **Opt out** of marketing email at any time, using the unsubscribe link or by writing to us - **Refuse** further collection about your child Email **support@fastpitchauthority.com** from the address on your account, with "Privacy Request" in the subject line. We will acknowledge within 5 business days and complete the request within 30 days, and in any case within 45 days where the law allows longer. Deletion requests are currently carried out by our staff rather than by a button in your account. We are building a self-service option. Until it exists, email us and it will be done. Deleting an athlete's profile removes her name, photograph, date of birth, and biographical information, and removes her from rankings. Anonymized game records may remain in the historical record of a game, because a box score with a player silently removed is a false record of what happened. Depending on where you live you may have additional rights under state law, including the right to know what categories of information we collect and the right not to be discriminated against for exercising a right. We do not sell personal information, so there is nothing to opt out of in that respect. ## 11. Security Access rules are enforced at the database layer, not only in the interface, because the browser holds a public key and interface checks alone are not a security control. We use encrypted connections, hashed passwords, private storage for athlete photographs, and signed, expiring links for video playback. No system is perfectly secure, and we do not claim otherwise. If a breach affects your information, we will notify you and the relevant authorities as required by law. ## 12. Where information is held Information is stored on servers in the United States. If you use the service from outside the United States, you are transferring information here. ## 13. Changes If we change this policy we will update the effective date at the top and, for a material change, notify account holders by email. Where a change affects the scope of a consent you have given, we will ask again rather than rely on the old one. ## 14. Contact Fastpitch Authority 126 Shipman Ln, Double Springs, Alabama 35553 support@fastpitchauthority.com Related documents: Terms of Service · Children's Privacy Notice · Subscription Terms · Media Release · Rankings Methodology